Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/7pyzyvjja0FciN-21JNIeD5Gnmo.roa
File:                     7pyzyvjja0FciN-21JNIeD5Gnmo.roa (raw, json)
Hash identifier:          fRIHgmEB1tGvNnPsM5Hyc279iZrYlxIAUw/He7wMxJQ=
Subject key identifier:   EE:9C:B3:CA:F8:E3:6B:41:5C:88:DF:B6:D4:93:48:78:3E:46:9E:6A
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF97A2CDA7B64CE93FC16E59CBB687B
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/7pyzyvjja0FciN-21JNIeD5Gnmo.roa
Signing time:             Mon 02 Jan 2023 00:54:58 +0000
ROA not before:           Mon 02 Jan 2023 00:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56371
IP address blocks:        92.247.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:7a:2c:da:7b:64:ce:93:fc:16:e5:9c:bb:68:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee9cb3caf8e36b415c88dfb6d49348783e469e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:5b:af:13:23:24:0f:99:32:4d:85:19:49:
                    44:dd:19:d7:3e:1b:1c:6a:7b:79:3b:f2:03:5e:60:
                    b9:5a:35:87:09:3a:14:a6:bb:20:4b:88:3e:db:73:
                    e5:e8:42:19:80:a6:1e:c9:9e:bc:de:49:2c:c9:e6:
                    d1:45:cb:b0:67:1e:86:81:62:7c:2f:51:92:5f:5c:
                    90:7d:3d:9f:d7:f3:27:ad:f9:12:20:bd:81:2f:dc:
                    80:07:ef:de:25:53:bc:da:6d:bb:5d:9d:98:8b:22:
                    35:47:66:ce:6b:20:6e:25:25:71:a4:f3:85:1b:fb:
                    73:c6:3a:47:aa:6c:ef:36:cc:f0:17:98:01:df:54:
                    82:ac:8b:ba:62:e2:3b:4f:c7:ad:42:e6:65:fa:06:
                    c5:5c:a5:50:40:5b:cf:d4:36:61:0c:a7:86:52:27:
                    44:25:9a:b1:4c:11:68:e1:e1:8d:9c:a9:f5:5f:74:
                    c9:d5:3a:d4:2d:e9:ec:70:9a:65:71:cc:f2:81:59:
                    29:5a:75:2e:0a:4a:ca:db:7e:d1:89:f5:38:f9:62:
                    26:74:a8:7b:2d:55:05:e9:a6:e9:da:98:17:dd:4b:
                    b4:48:b5:28:11:7e:a8:db:60:a4:40:3b:43:18:88:
                    d8:3e:1e:57:8a:4d:e3:94:22:96:9b:33:f6:d7:90:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9C:B3:CA:F8:E3:6B:41:5C:88:DF:B6:D4:93:48:78:3E:46:9E:6A
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/7pyzyvjja0FciN-21JNIeD5Gnmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d5:76:82:bf:f1:d0:27:05:4c:6c:27:a3:39:22:27:1a:75:
         34:ba:60:7c:a9:11:64:7d:46:12:ae:f4:e4:7f:f2:bd:cd:c8:
         c6:da:58:ee:c0:0b:e9:ba:ed:5d:77:9c:d0:fd:83:1d:e2:aa:
         09:6a:76:1f:cf:65:51:1e:3d:30:13:2e:45:8f:ae:ba:a7:9c:
         19:41:85:b5:c9:66:d7:f8:4a:30:2a:33:2b:26:7f:16:4c:c7:
         1d:9c:c9:5a:95:80:21:f9:26:74:77:55:a1:1a:f2:d0:94:9b:
         2e:31:2f:fb:ed:cc:32:bd:55:15:40:0f:e5:05:44:35:98:19:
         09:fb:d0:aa:9f:09:5f:1c:93:ec:27:1c:b4:1d:b4:2d:15:12:
         38:ea:1a:93:33:8e:4c:6b:54:40:ff:5a:71:95:d6:38:26:a8:
         cb:b7:d0:c3:e7:a3:d0:47:77:aa:f7:20:42:94:b6:35:5a:8a:
         70:c1:84:36:74:16:cb:09:3b:bf:dd:bd:53:84:ed:86:6b:3d:
         aa:49:65:82:35:cc:1f:25:83:1e:9b:81:76:9d:2d:f6:ef:84:
         2e:1b:19:2d:14:e7:48:c1:59:71:48:f2:c3:0f:48:ae:54:91:
         d6:c8:7e:67:e4:42:47:c1:68:bb:9f:a4:68:f1:2b:dd:23:f2:
         f5:e8:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:51 2024 by rpki-client on console-ams.rpki-client.org